
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5D49C24CAF1211EB8138312CC4F9AE02.roa
File: 5D49C24CAF1211EB8138312CC4F9AE02.roa (raw, json)
Hash identifier: mvXSigs+CYMUI0qIQU184GsMAO7ebIzgG1gltQZTv74=
Subject key identifier: 8E:7C:5E:30:99:2E:D3:94:24:62:4A:01:B5:16:E9:FC:09:C4:7B:83
Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial: 06AA
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5D49C24CAF1211EB8138312CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:05:13 +0000
ROA not before: Fri 18 Jul 2025 23:35:21 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 137443
IP address blocks: 103.119.104.0/23 maxlen: 23
103.119.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1706 (0x6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Validity
Not Before: Jul 18 23:35:21 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a463b9-4c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:ba:d9:b6:60:c7:4a:af:27:94:71:73:e7:
37:eb:c8:e2:71:51:86:92:a3:10:2c:d9:78:49:de:
b4:dc:63:3c:17:7e:1b:df:00:81:30:b9:eb:5d:c6:
8d:a2:19:e6:21:aa:73:78:34:53:19:e2:2a:ca:44:
60:15:76:26:85:80:4b:e9:36:48:b9:6a:6d:1d:b0:
38:06:a8:fc:f8:d1:92:45:0e:ee:23:89:51:fd:1c:
2d:f8:50:f7:f3:ed:89:50:e5:b2:aa:b3:bb:52:db:
bd:1b:9d:da:ff:b4:63:d3:ff:bf:7e:11:e0:c5:14:
28:11:82:d1:d8:6a:b7:66:03:f9:02:d0:40:29:86:
56:5c:72:2f:2a:3f:10:61:d9:eb:36:51:52:00:1b:
61:60:fa:90:c8:2b:77:4e:e8:2e:1d:9d:d0:0b:19:
13:01:12:f3:6b:5d:21:ed:87:4d:b9:16:d0:66:56:
d4:81:35:ab:9b:0b:84:00:f7:d0:1f:23:ac:61:f2:
ea:bb:30:ae:96:2c:c6:77:38:aa:9c:5c:40:90:2d:
bd:91:f3:1e:54:ec:3e:59:f6:d6:2f:c9:54:2a:00:
72:a5:62:40:07:19:9c:3d:d7:48:7b:31:1e:5d:c4:
a6:3d:e9:3f:78:3c:f6:80:fe:de:0d:ce:1d:c1:02:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:5E:30:99:2E:D3:94:24:62:4A:01:B5:16:E9:FC:09:C4:7B:83
X509v3 Authority Key Identifier:
keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/5D49C24CAF1211EB8138312CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.119.104.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:25:96:05:52:81:5e:ab:ba:a6:9d:8c:32:0d:90:82:b7:ca:
9b:22:56:74:d5:50:d8:bd:f5:aa:97:1f:4e:dd:a9:5f:58:d6:
12:49:4b:80:37:3f:fd:78:40:a6:fb:b1:3c:ca:7f:b3:3e:60:
f1:ad:2d:0d:3e:51:a4:36:1f:e1:e4:06:eb:30:f2:76:48:1f:
95:f9:9f:a6:b2:84:4d:4e:e9:86:4f:7f:07:fe:04:bc:f1:f5:
1b:be:79:4d:fd:ce:25:8c:81:11:80:fd:d5:d3:92:73:c4:48:
2c:a9:b7:81:85:30:6f:08:71:7f:70:e7:4b:5b:51:1a:f0:92:
e3:a2:0f:0d:1b:ae:30:3d:ad:06:97:17:05:40:17:07:b6:a1:
7d:98:78:18:df:03:eb:b4:9a:8b:85:fe:d0:76:d3:2f:90:2a:
fc:f6:17:39:18:64:cb:6c:db:17:ef:df:0a:6c:f4:27:c1:36:
b8:bf:31:1f:aa:91:81:9a:89:0a:f8:8d:8c:87:65:f0:d9:8c:
99:2b:07:ab:9f:27:2d:1e:dc:9b:f0:08:53:11:24:d4:b0:a2:
df:88:b5:83:32:c3:77:94:46:0b:23:c5:ee:84:9c:e9:07:8a:
64:40:99:94:3d:51:52:82:1b:ff:7b:44:ba:fb:c1:c5:54:06:
05:bb:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:04 2026 by rpki-client